Bro no one will use a web service and trust it is 100% private. This is an unprovable claim. Maybe it is private now, but you sell this in 5 years and it stops being so.

Maybe a JavaScript ad jailbreaks an iframe and reads this.

There is no beating a locally running program